CVE-2026-8713

CVE-2026-8713 — Exploit de Avada Fusion Builder para WordPress Path Traversal sin autenticación → Eliminación arbitraria de archivos → Reinstalación forzada → RCE Descripción general CVE-2026-8713 es una vulnerabilidad crítica con CVSS 9.1 en el plugin/tema Avada Fusion Builder para WordPress. La...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- Apache Tomcat - Remote Code Execution via Session Deserialization CVE-2025-24813...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco An issue was discovered in Hyland Alfresco Community Edition =7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage...

CVE-2022-25813

CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz By inserting malicious content in a message’s “Subject” field, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote...

CVE-2019-14224

CVE-2019-14224: Authenticated Remote Code Execution in Alfresco Community By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution. The attacker must use Alfresco to: Upload malicious Solr...

bassmaster-rce

bassmaster-rce Exploiting CVE-2014-7205 by injecting arbitrary JavaScript resulting in Remote Code Execution. I stumbled across this Post by LuuPhu written in viatnamese. Since I have written some code in NodeJS but never came across exploiting it, I figured why not today? The Python PoC includes...

cve-2026-41042

CVE-2026-41042: Apache Gravitino 1.2.1 Unauthenticated RCE Self-contained, stdlib-only proof of concept for CVE-2026-41042: unauthenticated remote code execution in Apache Gravitino before 1.2.1 via the H2 JDBC INIT connection setting. No auth headers, no extra drivers, no pip installs...

CVE-2019-12409

CVE-2019-12409: RCE Vulnerability Due to Bad Defalut Config in Apache Solr The 8.1.1 and 8.2.0 releases of Apache Solr contains insecure setting in the default solr.in.sh configuration file shipping with Solr. The setting that result in this vulnerability are: In "solr.in.sh":...

CVE-2019-17424

CVE-2019-17424 RCE Exploit For CVE-2019-17424 nipper-ng 0.11.10...

CVE-2026-56290

CVE-2026-56290 - Compagebuilderck Mass Exploit ⚠️ Disclaimer This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal Use this tool only on systems you own or have explicit permission to test The author is not responsible for an...

CVE-2026-13714

root@kitploit: Realtyna WPL 5.3.0 - Unauthenticated RCE Exploit Description This exploit targets a critical vulnerability in Realtyna Organic IDX + WPL Real Estate plugin versions prior to 5.3.0. The plugin uses hardcoded credentials and allows unauthenticated file upload leading to Remote Code...

CVE-2026-41089

🚨 CVE-2026-41089 - Critical Windows Netlogon Remote Code Execution RCE ⚠️ A critical Windows Netlogon vulnerability allowing unauthenticated remote code execution on domain controllers. 📖 Overview CVE-2026-41089 is a critical vulnerability affecting the Windows Netlogon service. The flaw originate...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE 此 PoC 演示了攻击者如何将 Orange Tsai 的 CVE-2024-4577 与 DNS 重绑定链式结合，通过受害者的网页浏览器直接对内部网络基础设施实现远程代码执行。通过绕过 同源策略（SOP） 并利用运行在 本地 XAMPP 服务器、内部开发环境或企业网络上的易受攻击的 PHP-CGI 实例，该攻击能够在原本不应暴露于互联网的系统上实现完整的代码执行。 BLOG...

KrayinCRM-RCE-Exploit-CVE-2026-38526

🔓 Krayin CRM v2.2.x - Authenticated Remote Code Execution Exploit ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY - Unauthorized use is illegal and unethical. 📋 Overview This exploit tool demonstrates a critical authenticated remote code execution RCE vulnerability discovered in Krayin CRM version 2.2.x...

CVE-2020-11984

Inicio rápido root@kitploit: docker build --no-cache -t cve-2020-11984 . docker run --rm -it -p 8080:80 --name cve-2020-11984 cve-2020-11984 pipenv run python3 exploit.py -u localhost:8080/ -c "echo 111/tmp/abc" Referencia root@kitploit: https://github.com/RubenBar/MLW-upcrans/...

CVE-2024-28397

CVE-2024-28397 js2py Sandbox Escape Exploit - CodePartTwo - HTB A Python exploit code for CVE-2024-28397 , a critical vulnerability in js2py = 0.74 that allows sandbox escape and remote code execution. 🚨 Vulnerability Details CVE ID : CVE-2024-28397 Affected Software : js2py = 0.74 Severity :...

CVE-2025-69219

CVE-2025-69219 — Apache Airflow Providers HTTP RCE via Unsafe Pickle Deserialization Severity: High CVSS 3.1: 8.8 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-913 — Improper Control of Dynamically-Managed Code Resources Affected: apache-airflow-providers-http = 5.1.0, Fixed in:...

CVE-2021-21974

CVE-2021-21974 VMware ESXi OpenSLP 堆溢出远程代码执行 PoC Author: Aiyakami 概述 CVE-2021-21974 是 VMware ESXi 中 OpenSLP 服务存在的堆溢出漏洞，攻击者可在未认证的情况下通过网络向目标 ESXi 主机的 SLP 服务（默认端口 427）发送特制数据包，实现远程代码执行（RCE）。 本仓库提供一份可在真实 ESXi 6.7 环境上稳定复现的单文件 Python PoC，纯网络路径打穿，无需目标本地凭据或 SSH 访问即可触发命令执行。 测试环境 项目| 信息 ---|--- 目标系统| VMware...

Mitigate-CVE-2023-46747

用于缓解 CVE-2023-46747 的 Ansible Playbook K000137353：BIG-IP 配置工具未经身份验证的远程代码执行漏洞 CVE-2023-46747 链接如下 https://my.f5.com/manage/s/article/K000137353 使用方法 1. Git 克隆我的仓库 https://github.com/maniak-academy/Mitigate-CVE-2023-46747.git 2. 根据你的 BIG-IP 信息更新 hosts.ini 3. 执行 playbook root@kitploit:...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC 此仓库包含 CVE-2025-8110 的概念验证（PoC），该漏洞是 Gogs 中的一个远程代码执行（RCE）漏洞。该漏洞利用内部 SSH 服务器实现，允许攻击者通过 sshCommand 配置注入恶意命令。 使用方法 要运行此漏洞利用，请使用 CVE-2025-8110.py 脚本，并指定目标 Gogs URL 以及您用于反弹 shell 的监听主机/端口。 root@kitploit: python3 CVE-2025-8110.py -u -lh -lp 参数 -u, --url：目标 Gogs 实例的基 URL（例如...